Urgent CISA Advisory On Ivanti Product Vulnerabilities

Ivanti and CISA advisories describe multiple high-severity vulnerabilities across Ivanti products — including a critical RCE (CVE-2024-37404), high-severity permission and command-injection flaws (CVE-2024-7612, CVE-2024-9380) and a SQL injection (CVE-2024-9379). The report notes limited exploitation of CSA instances when certain CVEs are chained, and urges immediate patching, inventory and patch management, network segmentation, and enhanced monitoring to mitigate the risk.